General
- Target FSRealisticHelper.bat
- Size 6.4MB
- Sample260707-vwlknabs3n
- SHA256 7f6fc0c87fcc5af625a5ba3838e49bd6f2890507668cd47522dc95cce2495c07
- MD5 26d82f20c25d13e50852d81adceefab7
- SHA1 62bdd86081f6cc1b94b0c9b73597aa2c9fea7c95
- SHA512 cd703eb7ae553b2b7a29a464d2d2e9d96d3e851b69a2b5be202e80574b6dd8f7784fa799bc54de327bb64c03896a745e0aa16987d45f28bb4db7e404ba44cf17
- SSDEEP 49152:MpZKohmrlXoVIxygp6GYhDsnNdi4okpSlYjfyQcOk9gGuJVmgUj5/L3wLzYxe17F:t
- TLSH T173663311DDA9BEAE496C8338716F5F1F2BB04ED1848CB5DA839060D7129FF81069BC79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
FSRealisticHelper.bat
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
FSRealisticHelper.bat
Resource
win11ltsc2024-20260706-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target FSRealisticHelper.bat
- Size 6.4MB
- SHA256 7f6fc0c87fcc5af625a5ba3838e49bd6f2890507668cd47522dc95cce2495c07
- MD5 26d82f20c25d13e50852d81adceefab7
- SHA1 62bdd86081f6cc1b94b0c9b73597aa2c9fea7c95
- SHA512 cd703eb7ae553b2b7a29a464d2d2e9d96d3e851b69a2b5be202e80574b6dd8f7784fa799bc54de327bb64c03896a745e0aa16987d45f28bb4db7e404ba44cf17
- SSDEEP 49152:MpZKohmrlXoVIxygp6GYhDsnNdi4okpSlYjfyQcOk9gGuJVmgUj5/L3wLzYxe17F:t
- TLSH T173663311DDA9BEAE496C8338716F5F1F2BB04ED1848CB5DA839060D7129FF81069BC79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Adds Run key to start application